不正URLへのアクセス、不正メールの受信
-
メール受信した
弊社お客様0社 URLアクセスした
弊社お客様20社 -
2026/07/17
※2026/07/17 更新
マルウェア感染させると考えられるURLを検知（2026/07/17）
■IoC（※1）
| Type: | IOC: | Signature: |
|---|---|---|
| URL | hxxps://qfammnuy[.]hazaratbet[.]game/f01c9d30-4bab-4a35-8b02-6193b316f81f hxxps://vqsoqrdq[.]hazarat[.]now/b741ed62-eedb-4b5e-9d74-69fad8d9d0c1 hxxps://rmxixoixm[.]pdfbama[.]com/7788a2e7-8243-4e1c-bbbb-dcbfa85ee93c hxxps://6lphdepl[.]sibbet90iran[.]com/?ublib=d202105e-e3d8-4000-9015-6dcdfe6b3d8d hxxps://i365pptc[.]lion1bet[.]com/?ublib=86c0a5e2-5c4e-46b6-803b-5762e5cfc797 hxxps://fcmznlck[.]hazaratbet[.]games/9a557e4c-7670-4054-933e-9316a6ff6813 hxxps://xquxoceqj[.]radioshartbandi[.]bet/1e0e9053-8281-428b-8a5c-90a8269ad0f1 hxxps://fmgvaoemg[.]jadoou[.]lat/040fb16f-1e98-4a55-94da-d769e10c25d4 hxxps://cdctvukr[.]taktikkbet[.]com/e34f523c-1bb0-45b8-9709-289f647a13e0 hxxps://bgzdrdniv[.]venus90bet[.]com/14c82ad9-595b-40af-982c-09f642d03a5b hxxps://cdbxemdoq[.]toofan90bet[.]com/7fd271f7-1281-47bc-ba3e-de40c76a1504 hxxps://wp8zfvuu[.]sky7bet[.]casino/?ublib=c9cea445-dcb9-46e2-8521-cd0d936d6b63 hxxps://5m1ugnlr[.]yekbetyek[.]com/?ublib=37f72ae9-db89-49b1-a034-23fb999b3c09 hxxps://kgfkfhqgg[.]gem90bet[.]com/37272ac5-96ce-4469-8462-a478b04fdadc hxxps://ohdvttqo[.]tampabayspin[.]com/988124bc-6865-4532-8213-99b59c138374 hxxps://mukmnvwls[.]101motorsports[.]net/7aa27017-c3a8-4900-a451-c97cd29cf9e2 hxxps://aupzcajq[.]biabet90[.]com/13cbd195-59fe-451f-9454-f05cdd9b00c6 hxxps://cdmke7zf[.]sky7bet[.]casino/?ublib=bad75b0e-1fe7-46af-ac0d-054f3dd77496 hxxps://x78boe03[.]lion1bet[.]com/?ublib=c463b47a-159e-4f16-a6ad-6eaf34cef61c hxxps://cfplyjmq[.]efcasino[.]bet/9efca702-0e2d-4da8-aec5-7190633de2f5 hxxps://jii17zh7[.]yekbetyek[.]com/?ublib=68d40786-3560-4c8d-8e09-a9082809af4c hxxps://isbbetvcj[.]adsbln1[.]xyz/fd23f916-faae-4ed3-a371-d19fe06bec5d hxxps://mzzetrvqf[.]jadoou[.]space/9bdda670-24a1-450d-8a33-3a951410bb00 hxxps://xhbmcyyao[.]adsbln1[.]xyz/f4c00721-249b-4a5f-9122-b3c800ca2e2a hxxps://tufxszft[.]efcasino[.]bet/e050fb25-b98c-4995-89b0-f4488459ac55 hxxps://iygfxiad[.]efcasino[.]bet/0298c610-f747-409f-a765-014959fc8cde hxxps://zwydarcig[.]adsbln1[.]xyz/1eb9ab7d-f0c2-4dd0-b0d9-8451da50d873 hxxps://j112srgz[.]bahigo90bet[.]com/?ublib=973ef4ab-ea9c-4601-9e45-47bb8ee30648 hxxps://ftcfotjnd[.]adsbln2[.]xyz/85d96ca4-d374-4bd8-a864-c8c3ef38384f hxxps://rzecbgjw[.]enfejartime[.]com/c24f5964-b8c2-4604-a208-58163fee6cc4 hxxps://buaoqtgen[.]adsbln3[.]xyz/78a3d13a-8472-442a-b942-789e4cc67aef hxxps://eastbwxa[.]funxbet[.]casino/2530559d-2691-4dda-8251-969dfee77c95 hxxps://y4d9qpyb[.]bazisangkaqazgeychidancepoli[.]com/?ublib=129565b9-8b6d-491f-903b-33bf5e9da44c hxxps://tturfmcfk[.]adsbln4[.]xyz/92adb49f-a237-46d4-8470-2e6a6f7f1b51 hxxps://bjoqbxxh[.]hazzarat[.]com/3b94f365-ff7c-4171-a162-0d0f59145286 hxxps://x35w4q0s[.]varzeshlife[.]ir/?ublib=b212a544-3fe6-43f7-99f9-2a39666d2ab5 hxxps://74ock8ke[.]mahbetiran[.]com/?ublib=5f1b585d-9443-4cd4-a33d-c443c5ca8ef3 hxxps://vwrgeckmh[.]adsbln5[.]xyz/bc01c4dd-d739-4bd5-925f-3b75fa29305c hxxps://dqgfzcgm[.]hazzarat[.]world/f94bdf0e-61c2-42ec-b612-778cbf286086 hxxps://bhcivpxh[.]derbi[.]football/5978b0a2-3018-4bc8-9a77-e6f8309068f3 hxxps://mseikoean[.]allboroughrealestate[.]com/c0515420-2d42-4430-bb8e-12bd04e24ac1 hxxps://uvzbxwuc[.]gamehazarat[.]com/af4be38d-c3ae-4330-8476-4a5eb4a9488c hxxps://694j5tdy[.]behtarin-site-shartbandi-football[.]com/?ublib=b22fda4b-cb43-4dbb-8139-176a580adf21 hxxps://vwwbeohrh[.]apolloconeyisland[.]com/a54b5257-49cf-4818-be40-187474d319ae hxxps://lvppjubyy[.]barkerautoms[.]com/66e4f288-cb93-4b0c-b5fe-b76df32c0559 hxxps://qkvgzbcv[.]nextbahis[.]promo/b1ce8309-dab4-48dc-af11-ff88ced5c6ca hxxps://zkgeaxbs[.]nextbahis[.]promo/3627f39c-afa6-4f7d-89d9-de54f36d9333 hxxps://rmlgnuvje[.]barkerautoms[.]com/30271084-4815-4598-9c95-7a00844519de hxxps://maxwhywtk[.]betbuf90[.]com/a285bef4-0a7b-4125-bd90-e9f6bdabee90 hxxps://hdjdchgb[.]onjabet1[.]com/c4231bba-f5e5-458d-99c3-db5d8b68911d hxxps://2rhdb98z[.]comfortinnlaytonutah[.]com/?ublib=5c79b58c-608e-4320-be1d-232f6cc1b377 hxxps://qfphjme9[.]irani-music[.]com/?ublib=ec588e7e-fd7e-4643-be13-634ddd05179a hxxps://ic7s8w54[.]jetboro[.]fun/?ublib=ccce121c-c919-4dab-9cc8-a9e81a95eb43 hxxps://ojwvrerrm[.]derbi[.]promo/294a151c-18a3-4ac8-bfe5-99c24277ad91 hxxps://auucqutq[.]pdfbama[.]com/58f77a02-c575-4832-be37-baa0a69daff0 hxxps://xyoyfdeyf[.]efbetfarsi[.]com/868dcbbd-4c6a-4ead-a27d-c9a1d416176c hxxps://pzsbygor[.]radioshartbandi[.]bet/a61cc0ea-2b20-4a6c-aedd-693f8c6c939b hxxps://r4iuquzx[.]cookeatrun[.]com/?ublib=e1f3eea3-8ca8-48f2-b301-ae1e1ae47e5f hxxps://tjcmwnljp[.]fileboroo[.]com/4dc2ed26-953e-4207-8f84-e6e9bab422df hxxps://arpumupr[.]site-shartbandi-pasor[.]online/559123be-6f59-4e24-8c8b-91b38129cbef hxxps://drkynxdcu[.]gem90bet[.]com/59c8c774-acd0-4a32-a95a-6ba802d66e2b hxxps://9zzh7dnw[.]coop-fresh[.]com/?ublib=702cc10c-3f54-4334-b30d-73804b4e20b5 hxxps://edhabqne[.]taktikkbet[.]com/53d38096-d3a3-4bbb-b872-723d7ae93876 hxxps://eprqnfyeb[.]hazzarat[.]com/f9e59df2-38ae-4d8e-ad09-8d33a886fbfc hxxps://zetkskre[.]funxbet[.]casino/a9f9fe03-3951-4393-966f-29574f80f358 hxxps://eqodjhwk[.]enfejartime[.]com/8ff1732b-e6e2-4c17-8d2a-4dff9dc008ce hxxps://wig5l9be[.]calirayalake[.]com/?ublib=5860d163-98ec-4f94-99ce-d496cf0e6137 hxxps://g3b4hjbg[.]calculadoracomisiones[.]com/?ublib=ffe1997d-9b1b-48db-ac6b-c13fb2567aeb hxxps://zdgfs8pf[.]cacharreriamilenio[.]com/?ublib=c7b95fcd-84d0-4607-a443-6c5dd3dc1ea4 hxxps://ahxpqhqnc[.]nextbahis[.]coupons/909c03b4-cb3e-46ee-a0ee-7b11d431aa54 hxxps://bkgtqeai[.]derbi[.]football/2233564f-6d03-4137-a7c8-b9e0d778c79f hxxps://dvzzqxef[.]gamehazarat[.]com/b45e31b8-0984-4252-af42-194e80784a26 hxxps://rdusnlyzh[.]sky7bet[.]casino/ae01177e-9d8a-412e-9194-0461e1dadfee hxxps://iqgxtjfc[.]hazzarat[.]world/ed06acdd-b506-4c3e-8a8f-8f4b809ea96b hxxps://a1h9t4pt[.]venus90bet[.]com/?ublib=a024b7b0-8127-45cb-b600-0b9ba3c40352 hxxps://chsxhscsh[.]tampabayspin[.]com/27615a17-9875-4ff0-912b-145a3e31ac3c hxxps://vkvmygpg[.]betbuf90[.]com/d147e820-cdb8-4323-9223-a10149783d9f |
ClearFake |
| URL | hxxp://103[.]79[.]185[.]121/a7891[.]sh | Prometei |
| URL | hxxp://91[.]92[.]242[.]236/files-129312398/files/file_ea2a49c4ce088045[.]exe hxxp://91[.]92[.]242[.]236/files-129312398/files/file_7d20fbf29474d0e5[.]exe |
Stealc |
| URL | hxxp://178[.]16[.]54[.]109/last[.]exe | Phorpiex |
| URL | hxxps://ritchie[.]click/7kv57ax9[.]js hxxps://ritchie[.]click/jh2fg27r[.]js hxxps://ritchie[.]click/q7eu4gpd[.]js hxxps://ritchie[.]click/gkbfcesb[.]js hxxps://ritchie[.]click/85iuztos[.]js hxxps://ritchie[.]click/ha1es146[.]js hxxps://ritchie[.]click/l46p3f8z[.]js hxxps://ritchie[.]click/t4et81av[.]js hxxps://ritchie[.]click/mmaxs0rs[.]js hxxps://ritchie[.]click/lkg91c5q[.]js hxxps://ritchie[.]click/o9qhk2jz[.]js hxxps://tommy-or[.]lol/f hxxps://ritchie[.]click/pvgdgpjx[.]js |
KongTuke |
| URL | hxxps://deliverymailreport[.]co[.]za/img_053354[.]png hxxps://deliverymailreport[.]co[.]za/MSI_230953[.]png hxxp://194[.]116[.]236[.]163/35/weneedbestthingsforeverywheretounderstand[.]hta |
Remcos |
| URL | hxxps://xevzora[.]cfd/offc/secured_stub[.]ps1 hxxps://xevzora[.]cfd/graced/secured_stub[.]ps1 hxxps://xevzora[.]cfd/blessed/secured_stub[.]ps1 hxxp://64[.]89[.]161[.]16/1/products[.]exe |
AsyncRAT |
| URL | hxxps://solar-sanat[.]net/715-16[.]exe | PureLogs Stealer |
| URL | hxxps://pdlaw[.]com[.]ph/wp-admin/maint/seccured_stub[.]ps1 | Agent Tesla |
| URL | hxxp://usafansweepstakes2026[.]us/pure/1[.]jpg hxxp://216[.]9[.]224[.]48/9/didgkjm[.]txt hxxps://studiogioeli[.]it/armful/ATPI_Annual_Dinner[.]js |
Stealerium |
| URL | hxxps://lucciodontologiaintegrada[.]com[.]br/16/zong[.]ps1 | Formbook |
| URL | hxxps://01pr[.]com[.]tr/shed/sdy[.]png hxxps://01pr[.]com[.]tr/shed/MSI_PRODJ5TH[.]png |
XWorm |
| URL | hxxps://leposeur[.]com/assets/js/bootstrap[.]bundle[.]min[.]js | IClickFix |
| URL | hxxp://220[.]158[.]234[.]220/p-p[.]c-[.]Sakura hxxp://220[.]158[.]234[.]220/a-r[.]m-4[.]Sakura hxxp://220[.]158[.]234[.]220/a-r[.]m-5[.]Sakura hxxp://220[.]158[.]234[.]220/x-8[.]6-[.]Sakura hxxp://220[.]158[.]234[.]220/a-r[.]m-6[.]Sakura hxxp://220[.]158[.]234[.]220/m-p[.]s-l[.]Sakura hxxp://45[.]135[.]194[.]50/mips |
Bashlite |
| URL | hxxps://nightmare-loader[.]cc/Nightmare[.]zip | AMOS |
| URL | hxxp://43[.]198[.]235[.]91/getinstall64 | ValleyRAT |
| URL | hxxps://content-website-analytics[.]com/script[.]js | FAKEUPDATES |
